weblogic.management.security.authorization
Interface RoleEditorMBean

Provides a set of methods for creating, editing, and removing
policies. An Authorization-provider MBean can optionally extend
this MBean. The WebLogic Server Administration Console detects
when an Authorization provider extends this MBean and
automatically provides a GUI for using these methods.

Deprecation of MBeanHome and
Type-Safe Interfaces

In addition to being used as
a base class that provides functionality to security provider
MBeans, JMX applications can use this class directly as a type-safe
interface. When used as a type-safe interface, a JMX application
imports this class and accesses it through
weblogic.management.MBeanHome. As of 9.0, the
MBeanHome interface and all type-safe interfaces for
WebLogic Server MBeans are deprecated. Instead, JMX applications that
interact with WebLogic Server MBeans should use standard JMX design
patterns in which clients use the
javax.management.MBeanServerConnection interface to
discover MBeans, attributes, and attribute types at runtime.

createRole

resourceId - - The resource that scopes the new role.
Each resource has its predefined 'hierachy'.
This new role is applicable to all of the given resouce's
descendants if any.
A null indicates a global role, no scoping resource,
which applies to all resources within the container.

roleName - - The name of the role that this method creates.
A null value will trigger NullPointerException.

expression - - The expression policy designates which user or group
having this named 'role'.
A null value indicates this role is not granted to anyone.

setRoleExpression

resourceId - - The resource that scopes the new role.
Each resource has its predefined 'hierachy'.
This role is applicable to all of the given resouce's
descendants if any.
A null indicates a global role, no scoping resource,
which applies to all resources within the container.

roleName - - The name of the role for which this method replaces a policy.
A null value will trigger NullPointerException.

expression - - The expression policy designates which user or group
having this named 'role'.
A null value indicates this role is not granted to anyone.